All checks
High ElastiCache · regional

ElastiCache clusters should have automatic minor version upgrades enabled

Checks that node-based ElastiCache (Redis OSS) cache clusters, including the nodes of a replication group, have automatic minor version upgrades turned on, so minor engine versions, which can carry security patches and bug fixes, are applied without a manual upgrade.

service
ElastiCache
severity
High
scope
evaluated in every region

How to fix it

  • Interrupts service: Upgrades then apply in the maintenance window, where a cluster with no replica to fail over to is unavailable while its node is replaced.

In the console

ElastiCache → the cache → Modify → Maintenance → Auto upgrade minor versions

Auto upgrade minor versions
Enable; the setting is disabled below Redis OSS 6.0, so raise the engine version first on an older cluster
Maintenance Window
The quietest hours, since upgrades are applied then

With the AWS CLI

aws elasticache modify-cache-cluster --cache-cluster-id <cache-cluster-id> --auto-minor-version-upgrade --region <region>

With Terraform

resource "aws_elasticache_cluster" "this" {
  cluster_id                 = var.cluster_id
  engine                     = "redis"
  auto_minor_version_upgrade = true
}

See which of your accounts this check is failing on.

Book a live scan